CVE-2025-68615: debian debian_linux
CVSS: 9.8v3.1CriticalAnalyzed
AliasesALPINE-CVE-2025-68615MGASA-2026-0008SUSE-SU-2026:0195-1SUSE-SU-2026:0225-1SUSE-SU-2026:0227-1SUSE-SU-2026:0227-2SUSE-SU-2026:0228-1SUSE-SU-2026:20267-1SUSE-SU-2026:20359-1SUSE-SU-2026:20751-1SUSE-SU-2026:20901-1RHSA-2026:0668RHSA-2026:0696RHSA-2026:0750RHSA-2026:0810RHSA-2026:0812RHSA-2026:0813RHSA-2026:0814RHSA-2026:0815RHSA-2026:0850RHSA-2026:0851RHSA-2026:0852RHSA-2026:0853RHSA-2026:0926UBUNTU-CVE-2025-68615DEBIAN-CVE-2025-68615DLA-4430-1DSA-6098-1openSUSE-SU-2026:10157-1openSUSE-SU-2026:20383-1
Published 22-12-2025Last modified 01-05-2026
Vulnerability summary
CVE-2025-68615 is a critical (CVSS 9.8) vulnerability in debian debian_linux. EPSS estimates a 42.36% chance of exploitation in the next 30 days, higher than 98.6% of scored vulnerabilities. 1 public exploit is recorded.
CVSS score
9.8/10
010
Critical · v3.1 (CVE.org)EPSS score
42.36%
0%100%
High · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits1reference
Advisory lineage
Upstream 0 · Downstream 0 · Related 1Timeline
- 22-12-2025PublishedVulnerability first disclosed.
- 01-05-2026Last modifiedVulnerability information updated.
Description
net-snmp is a SNMP application library, tools and daemon. Prior to versions 5.9.5 and 5.10.pre2, a specially crafted packet to an net-snmp snmptrapd daemon can cause a buffer overflow and the daemon to crash. This issue has been patched in versions 5.9.5 and 5.10.pre2.
CVSS metrics
6 scores · 6 sources · 1 versionCritical 9.8Preferred score · CVE.org (CNA)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HSourcesAll 6 agree
- OSV · AlpineEcosystem advisory · calculated9.8CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- OSV · Red hatEcosystem advisory · calculated9.8CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- OSV · UbuntuEcosystem advisory · calculated9.8CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated9.8CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- NVDNIST9.8CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS trend
Probability
42.36%
Chance of exploitation in the next 30 days
Percentile
99%
Versus all other CVEs
30-day change
0.00 pp
From 42.36% on 18-09-2026
18-09-202618-10-2026
EPSS score42.36%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundExploit Reference (vicarius.io)
Maturity: unknown
Weaknesses
CWE · root causeAffected systems
Suse22 products
- net-snmp&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS< 5.7.3-150100.10.15.1 | < 5.9.4-150300.15.21.1
- net-snmp&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS< 5.7.3-150100.10.15.1 | < 5.9.4-150300.15.21.1
- net-snmp&distro=SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS< 5.7.3-150100.10.15.1 | < 5.9.4-150300.15.21.1
- net-snmp&distro=SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS< 5.7.3-150100.10.15.1 | < 5.9.4-150300.15.21.1
- net-snmp&distro=SUSE Linux Enterprise Micro 5.3< 5.7.3-150100.10.15.1 | < 5.9.4-150300.15.21.1
Redhat16 products
- net-snmp< 1:5.9.4-15.el10_1.2 | < 1:5.9.1-17.el9_7.1 | < 1:5.8-33.el8_10 | < 1:5.9.4-15.el10_0.2 | < 1:5.9.1-17.el9_6.1 | < 1:5.9.1-13.el9_4.4 | < 1:5.9.1-11.el9_2.3 | < 1:5.9.1-7.el9_0.3 | < 1:5.8-14.el8_2.6 | < 1:5.8-25.el8_6.3 | < 1:5.8-20.el8_4.3 | < 1:5.8-27.el8_8.3 | < 1:5.7.2-49.el7_9.5
- net-snmp-agent-libs< 1:5.9.4-15.el10_1.2 | < 1:5.9.1-17.el9_7.1 | < 1:5.8-33.el8_10 | < 1:5.8-14.el8_2.6 | < 1:5.8-25.el8_6.3 | < 1:5.8-20.el8_4.3 | < 1:5.8-27.el8_8.3
- net-snmp-agent-libs-debuginfo< 1:5.9.4-15.el10_1.2 | < 1:5.9.1-17.el9_7.1 | < 1:5.8-33.el8_10 | < 1:5.8-14.el8_2.6 | < 1:5.8-25.el8_6.3 | < 1:5.8-20.el8_4.3 | < 1:5.8-27.el8_8.3
- net-snmp-debuginfo< 1:5.9.4-15.el10_1.2 | < 1:5.9.1-17.el9_7.1 | < 1:5.8-33.el8_10 | < 1:5.8-14.el8_2.6 | < 1:5.8-25.el8_6.3 | < 1:5.8-20.el8_4.3 | < 1:5.8-27.el8_8.3
- net-snmp-debugsource< 1:5.9.4-15.el10_1.2 | < 1:5.9.1-17.el9_7.1 | < 1:5.8-33.el8_10 | < 1:5.8-14.el8_2.6 | < 1:5.8-25.el8_6.3 | < 1:5.8-20.el8_4.3 | < 1:5.8-27.el8_8.3
Opensuse3 products
- net-snmp&distro=openSUSE Leap 15.6< 5.9.4-150600.24.10.1
- net-snmp&distro=openSUSE Leap 16.0< 5.9.4-160000.3.1
- net-snmp&distro=openSUSE Tumbleweed< 5.9.5.2-1.1
Debian2 products
- net-snmp< 5.9.5.2+dfsg-1 | < 5.9.3+dfsg-2+deb12u1 | < 5.9.4+dfsg-2+deb13u1 | < 5.9+dfsg-4+deb11u3
- debian_linuxEOL11.0
Alpine1 product
- net-snmp< 5.9.5.2-r0
Mageia1 product
- net-snmp< 5.9.3-2.2.mga9
Net-snmp1 product
- net-snmp≥ 5.10.pre1, < 5.10.pre2 | < 5.9.5 | 5.10:pre1
Ubuntu1 product
- net-snmp< 5.7.2~dfsg-8.1ubuntu3.3+esm4 | < 5.7.3+dfsg-1ubuntu4.6+esm2 | < 5.7.3+dfsg-1.8ubuntu3.8+esm1 | < 5.8+dfsg-2ubuntu2.9+esm2 | < 5.9.1+dfsg-1ubuntu2.9 | < 5.9.4+dfsg-1.1ubuntu3.2 | < 5.9.4+dfsg-2ubuntu2.1
8 vendors · 47 products
References
55 links- github.com/net-snmp/net-snmp/security/advisories/GHSA-4389-rwqf-q9gqX Refsource CONFIRMARTICLEREPORTVendor Advisory